+AC-17(02) Protection of Confidentiality and Integrity Using Encryption

AC-17(02) Protection of Confidentiality and Integrity Using Encryption

Control

Implement cryptographic mechanisms to protect the confidentiality and integrity of remote access sessions.

Discussion

Virtual private networks can be used to protect the confidentiality and integrity of remote access sessions. Transport Layer Security (TLS) is an example of a cryptographic protocol that provides end-to-end communications security over networks and is used for Internet communications and online transactions.

Assessment Objective

cryptographic mechanisms are implemented to protect the confidentiality and integrity of remote access sessions.

Assessment Method

Examine

Access control policy procedures addressing remote access to the system system design documentation system configuration settings and associated documentation cryptographic mechanisms and associated configuration documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

Követelmények

3. Kapcsolódó szabályozások

Szabályozások

Kapcsolt feladatok

Kapcsolatok
is blocked by AC-17(02) Protection of Confidentiality and Integrity Using Encryption – Assessment Procedure
is blocked by Remote Access Cryptographic Protections